On 10-03-10 16:48, Jesse Becker wrote:
> On Wed, Mar 10, 2010 at 09:50:37AM -0500, Bas van der Vlies wrote:
>> I am new to cfengine3. That is why all the questions. For me it will be
>> useful if i can specify this:
>> inputs => {
>> "update.cf",
>> "cf-serverd.cf",
>> "cf-execd.cf",
>> "quarterly.cf",
>> "methods/*.cf"
>> };
>>
>> Include all the files in the methods directory. I know i can do this with
>> some shellcommands but the above suggestion is better.
>
> There's something of a security risk here. If some miscreant manages to
> put the file "evilplot.cf" into the methods directory, this could be
> used to compromise the remote systems. I'd rather list the
> files explicitly. In practice, I've found this doesn't change
> frequently anyway, so it isn't a big deal to add/remove entries.
>
>
If he/she can put a file in this directory then you have already a security
risk ;-)
--
********************************************************************
* Bas van der Vlies e-mail: [email protected] *
* SARA - Academic Computing Services Amsterdam, The Netherlands *
********************************************************************
_______________________________________________
Help-cfengine mailing list
[email protected]
https://cfengine.org/mailman/listinfo/help-cfengine
